Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa
File: 3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier: o+XAEZ0iTk7+XrYc8u03MxUQ+1laASrFM559UsVdxE4=
Subject key identifier: 77:5D:E4:E2:36:0D:17:52:E2:57:7E:D2:1C:5D:34:6C:EB:1E:86:65
Certificate issuer: /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial: 6EC8819E2F4F1E7E423D1FE25C2C436175021373
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa
Signing time: Mon 25 Nov 2024 16:52:36 +0000
ROA not before: Mon 25 Nov 2024 16:47:36 +0000
ROA not after: Mon 24 Nov 2025 16:52:36 +0000
asID: 270814
IP address blocks: 170.247.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c8:81:9e:2f:4f:1e:7e:42:3d:1f:e2:5c:2c:43:61:75:02:13:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
Validity
Not Before: Nov 25 16:47:36 2024 GMT
Not After : Nov 24 16:52:36 2025 GMT
Subject: CN=775DE4E2360D1752E2577ED21C5D346CEB1E8665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:20:1a:15:b8:5e:0e:3d:a5:cb:26:e8:a3:
f9:10:39:15:54:e2:e0:43:3a:6c:c8:94:78:e1:c0:
44:5e:82:01:5b:1b:87:94:45:59:ba:8c:1b:d6:e5:
25:a2:54:f3:3e:ef:d7:c6:b5:21:e3:c9:a0:f0:db:
78:c9:45:96:79:1d:cb:b9:b4:93:b0:13:5c:b2:c1:
58:52:80:1b:66:12:fa:c0:4a:92:db:0c:d9:7d:ad:
1d:61:06:c8:45:4e:0d:38:12:c0:a7:72:6c:0a:db:
d1:22:54:69:e2:33:88:a6:4f:dd:f3:d4:fa:9f:a5:
57:71:c6:fa:1c:9f:83:04:b3:e7:e4:80:91:61:b7:
3a:73:bc:ca:85:be:88:83:89:e6:19:7a:7a:04:ba:
59:10:5a:d0:0d:04:e4:00:6b:b7:95:54:72:cb:c3:
29:a9:32:35:44:fb:82:5c:c0:5b:d9:73:42:8f:f2:
7e:7e:1c:33:41:12:0c:15:88:08:3a:6e:09:3e:cf:
64:ac:d7:4f:a1:34:af:88:c1:ed:99:c6:05:87:f0:
e9:c3:d1:4a:4a:c7:cd:b7:f4:c6:79:07:8c:1b:13:
3f:66:d6:1e:6f:6d:27:88:16:51:e4:01:71:9e:dc:
b1:82:ac:b1:82:6c:4f:29:ae:9b:f5:fd:6e:2d:b1:
25:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:E4:E2:36:0D:17:52:E2:57:7E:D2:1C:5D:34:6C:EB:1E:86:65
X509v3 Authority Key Identifier:
keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137302e3234372e3132342e302f32322d3234203d3e20323730383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:46:b4:90:9b:fa:2a:d0:20:a5:06:ab:3b:fb:25:94:57:bc:
58:22:48:7d:af:be:62:22:7f:b0:b5:3b:88:12:9f:cf:e2:32:
bc:11:b1:b2:24:0c:83:34:8a:03:6e:5e:54:fe:75:ce:59:26:
f7:04:f8:d5:a1:16:d0:57:ba:21:d5:fe:ee:ec:65:d2:ec:63:
30:5c:0d:d2:6d:26:30:7b:eb:08:d2:40:d3:90:8e:92:24:95:
e8:b1:ab:8c:3b:49:21:30:fa:59:47:4b:91:f0:e7:ad:80:96:
bf:b9:1a:13:2a:4b:65:cd:77:7c:df:cd:cc:40:ce:43:ec:6f:
10:a5:61:94:9c:9b:ea:2c:1a:bb:31:87:a1:2c:e5:fb:b2:93:
64:9a:af:c9:15:6a:ef:65:fc:1f:10:eb:cd:3d:cc:ed:25:65:
e6:45:5f:d6:f2:18:db:40:28:98:4b:44:f0:41:cd:2b:00:fc:
cb:b3:00:37:e8:dc:c4:61:61:c3:95:aa:9e:9a:e5:20:7a:04:
84:6c:16:8c:03:bf:56:0d:d4:1b:86:51:52:c1:7a:95:85:e7:
91:38:bc:12:3a:d8:23:dd:e7:46:d4:1a:ee:dd:ff:7a:44:93:
13:a0:90:a5:03:d5:19:ac:87:1a:92:a2:23:a0:49:16:ae:54:
d6:c7:fe:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:42:43 2025 by rpki-client